The Effect of Length on Key Fingerprint Verification Security and Usability · HackerPapers discussionshttps://hackerpaper.kaipfister.de/p/2306.04574/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMTThe Effect of Length on Key Fingerprint Verification Security and Usability — mentioned by doomrobohttps://news.ycombinator.com/item?id=45610566urn:hackerpapers:mention:2306.04574:45610566Thu, 16 Oct 2025 20:55:29 GMT<p>I&#x27;ll actually argue the opposite. Transparency is _the_ pivotal thing, and code signing needs to be built on top of it (it definitely should be built into the browser, but I&#x27;m just arguing the order of operations rn). TL;DR you&#x27;ll either re-invent transparency or end up with huge security holes. Suppose you have code signing and no transparency. Your site has some way of signaling to the browser to check code signatures under a certain pubkey (or OIDC identity if you&#x27;re using Sigstore). Suppose now that your site is compromised. What is to prevent an attacker from changing the pubkey and…</p><p><a href="https://hackerpaper.kaipfister.de/p/2306.04574/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.CR